Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
File:                     7qiugNcT5rItsOxgkVfwxZpS_X8.mft (raw, json)
Hash identifier:          GYlTsQzCcCEdz8K6361MswbC18qhPQmPKXanO+LjlXY=
Subject key identifier:   3D:A6:D4:5E:BC:9A:2F:DB:EF:5E:47:BD:47:C0:26:1D:86:0C:96:2E
Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F
Certificate issuer:       /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
Certificate serial:       359B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
Manifest number:          3553
Signing time:             Tue 24 Mar 2026 14:50:16 +0000
Manifest this update:     Tue 24 Mar 2026 14:50:16 +0000
Manifest next update:     Tue 31 Mar 2026 14:50:16 +0000
Files and hashes:         1: 7qiugNcT5rItsOxgkVfwxZpS_X8.crl (hash: 8LxJdPe6O0Qcc3YDUq5tKWsAZtVhKKqReukkAEY1v3Y=)
                          2: 2ACF9E0C855C11EB8C076013C4F9AE02.roa (hash: RNuWwl4ucRlwsOZtGnFpFuiswJzOcCNas2gxr3gm8mE=)
                          3: 2A73A3403A0711F081048A4EC4F9AE02.roa (hash: dvlRe6H3F8B2GwYIE840UeTvVO5dQ86LFZ7LGPZOm2k=)
                          4: 6C0C85D0A43011ECA230771BC4F9AE02.roa (hash: LL2Fp2e55MEWgbkr5inndl6+DJiSk2JSjx4YlfL31Ys=)
                          5: F026CE74927411EDB020A481C4F9AE02.roa (hash: QKAwXjlAKaeSYPJnynXkKE/C3RLluritzofePdZuC8Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl
                          rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13723 (0x359b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F
        Validity
            Not Before: Mar 24 14:50:16 2026 GMT
            Not After : Mar 31 14:50:16 2026 GMT
        Subject: CN=69c2a4a8-2e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7b:17:a7:d1:43:58:58:17:0b:60:91:f2:66:
                    0a:02:aa:1c:03:38:76:da:15:29:7b:df:ad:ad:7d:
                    28:b8:a9:c9:58:f2:2c:ad:0c:da:bd:c2:85:78:e1:
                    1d:49:13:ad:57:93:89:24:f8:08:21:15:9f:c5:9a:
                    34:52:21:74:70:32:c0:6e:6e:7c:14:76:bb:03:34:
                    dc:cb:4e:e9:fb:e5:8c:84:94:fa:5a:ca:81:3e:d9:
                    6c:f3:c7:49:0f:04:79:8c:e7:3d:7b:91:65:a8:6b:
                    0b:b6:dc:bb:22:66:25:99:1e:fe:f7:b6:86:c7:6b:
                    e2:a1:47:b3:db:8e:6a:0c:11:0a:fc:c0:79:6a:ed:
                    55:ce:f4:33:c5:7c:9a:31:65:34:0b:0e:32:b5:8f:
                    50:e6:68:4f:7d:e5:e7:a5:71:90:ea:57:a2:48:28:
                    4b:b2:eb:bf:2b:47:f5:a6:1d:62:84:73:de:51:82:
                    40:6b:d1:52:73:eb:23:d9:a0:50:34:1d:15:26:20:
                    73:00:b3:50:46:28:a8:c4:cd:44:55:96:01:43:61:
                    d3:0c:81:7e:9c:88:6c:74:fd:b6:8b:84:8f:fd:31:
                    d7:05:b6:33:88:c9:df:ee:0b:76:da:76:e2:33:63:
                    9e:d9:2c:1d:10:cd:11:0d:f7:18:5f:7b:5f:6d:cb:
                    17:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A6:D4:5E:BC:9A:2F:DB:EF:5E:47:BD:47:C0:26:1D:86:0C:96:2E
            X509v3 Authority Key Identifier:
                keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:7d:73:1a:65:53:b4:e7:71:05:8b:f5:80:27:b4:e1:70:88:
         30:94:c5:6b:bd:82:29:9a:c3:65:04:df:08:5e:ee:74:5c:68:
         ad:d3:47:7e:8a:3c:3b:3f:82:10:0e:9d:2e:d7:65:f8:ac:5f:
         a0:17:bf:a6:5e:42:37:ae:79:cf:09:33:57:74:27:69:76:ee:
         dd:bb:30:22:56:00:f7:64:8c:de:17:12:54:83:f5:9f:7c:47:
         e3:f0:61:07:b7:37:3e:ac:82:e1:5b:f5:d0:e4:c3:d0:00:a0:
         c4:f9:d1:c1:0b:be:e8:ad:83:40:68:f3:67:b2:b8:34:ad:50:
         ba:52:64:01:c7:1f:08:63:e2:f8:b1:0f:81:94:b3:06:a2:0c:
         ec:0e:08:86:ba:53:21:0b:20:6a:69:a2:6e:1a:b5:9c:51:d6:
         4d:a0:4e:45:6a:01:d3:df:15:de:a8:61:b3:18:4e:e9:4b:26:
         7b:43:46:d7:3b:38:37:fe:39:9b:b7:54:8a:09:c7:70:18:b3:
         0e:11:0d:dd:80:ec:08:f7:1b:db:e3:fd:8a:de:aa:3f:a6:a6:
         8a:2d:1c:2f:4c:b3:96:58:e1:a1:8b:77:e0:a1:19:5c:7e:5e:
         a5:2b:40:96:fd:bf:bf:15:79:6a:2d:a4:11:8d:00:25:8d:8c:
         ea:e6:1e:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ2QjcxMTAvBgNVBAUTKEVFQThBRTgwRDcxM0U2QjIyREIwRUM2MDkxNTdGMEM1
OUE1MkZEN0YwHhcNMjYwMzI0MTQ1MDE2WhcNMjYwMzMxMTQ1MDE2WjAYMRYwFAYD
VQQDEw02OWMyYTRhOC0yZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0XsXp9FDWFgXC2CR8mYKAqocAzh22hUpe9+trX0ouKnJWPIsrQzavcKFeOEd
SROtV5OJJPgIIRWfxZo0UiF0cDLAbm58FHa7AzTcy07p++WMhJT6WsqBPtls88dJ
DwR5jOc9e5FlqGsLtty7ImYlmR7+97aGx2vioUez245qDBEK/MB5au1VzvQzxXya
MWU0Cw4ytY9Q5mhPfeXnpXGQ6leiSChLsuu/K0f1ph1ihHPeUYJAa9FSc+sj2aBQ
NB0VJiBzALNQRiioxM1EVZYBQ2HTDIF+nIhsdP22i4SP/THXBbYziMnf7gt22nbi
M2Oe2SwdEM0RDfcYX3tfbcsXdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD2m1F68
mi/b715HvUfAJh2GDJYuMB8GA1UdIwQYMBaAFO6oroDXE+ayLbDsYJFX8MWaUv1/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCNy8xQzE2NjQxQzFE
OTcxMUUyOTZEMDMwODAwOEIwMkNEMi83cWl1Z05jVDVySXRzT3hna1Zmd3hacFNf
WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdxaXVnTmNUNXJJdHNPeGdrVmZ3eFpwU19YOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDZCNy8xQzE2NjQxQzFEOTcxMUUyOTZEMDMwODAwOEIwMkNEMi83cWl1Z05jVDVy
SXRzT3hna1Zmd3hacFNfWDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMH1zGmVTtOdxBYv1gCe04XCIMJTFa72CKZrDZQTfCF7udFxordNHfoo8Oz+C
EA6dLtdl+KxfoBe/pl5CN655zwkzV3QnaXbu3bswIlYA92SM3hcSVIP1n3xH4/Bh
B7c3PqyC4Vv10OTD0ACgxPnRwQu+6K2DQGjzZ7K4NK1QulJkAccfCGPi+LEPgZSz
BqIM7A4IhrpTIQsgammibhq1nFHWTaBORWoB098V3qhhsxhO6Usme0NG1zs4N/45
m7dUignHcBizDhEN3YDsCPcb2+P9it6qP6amii0cL0yzlljhoYt34KEZXH5epStA
lv2/vxV5ai2kEY0AJY2M6uYeUg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:01:07 2026 by rpki-client